EIP-2026-106510
PRE-CVEDokuWiki 2006-03-09b - 'dwpage.php' Remote Code Execution
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-106510. PoCs published by rgod.
AI-analyzed exploit summary This exploit leverages a directory traversal vulnerability in DokuWiki's dwpage.php script and an arbitrary file write via the X-FORWARDED-FOR header to inject a PHP shell into config.php, enabling remote command execution. It requires register_argc_argv to be enabled on the target server.
Description
DokuWiki 2006-03-09b - 'dwpage.php' Remote Code Execution
Exploits (1)
This exploit leverages a directory traversal vulnerability in DokuWiki's dwpage.php script and an arbitrary file write via the X-FORWARDED-FOR header to inject a PHP shell into config.php, enabling remote command execution. It requires register_argc_argv to be enabled on the target server.